CVE-2024-34050

Published: Apr 30, 2024Modified: Jun 27, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8 | uint64(b[0])" in reader.go.

Affected (1)

Products: Onosproject: Traffic Steering Xapplication

Onosproject

1 product

Traffic Steering Xapplication

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Onosproject Traffic Steering Xapplication	Version 0.1.1

Related CWEs

CWE-129

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (2)

https://github.com/onosproject/rimedo-ts/issues/16

Source: cve@mitre.org

ExploitIssue Tracking

https://github.com/onosproject/rimedo-ts/issues/16

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

Timeline

No history available yet.